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AMENDMENTS TO THE CLAIMS; 

This listing of claims will replace all prior versions, and listings, 
application: 

LISTING OF CLAIMS 

1- (Previously Presented) A group management system comprisrnlg 
a plurality of interconnected nodes communicatively coupled with 

member nodes of a virtual private network ("VPN"), wherein all 

between said interconnected nodes are encrypted; and 

a plurality of master nodes, each of the master nodes controlling 

departure in the VPN for an associated non-empty subset of the member 



2. (Previously Presented) The system of claim 1, wherein a membership change in 
at least one of the subsets can be performed without notifying all of the master nodes 
not associated with the changed subset 



of claims in the 



each other as 
communications 

admission and 
nodes. 



3. (Previously Presented) The system of claim 1, wherein at 
subsets do not share any member nodes in common. 

4. (Previously Presented) The system of claim 1, wherein at 
subsets share at least one member node in common. 



least two of the 



least two of the 



5. (Previously Presented) The system of claim 4, wherein ei 
involving said common member node can be transmitted along multiple 



6. (Original) The system of claim 5, further comprising an intrusion detection 
mechanism that receives said multiple-path communication as input. 



7. (Previously Presented) The system of claim 1, wherein in the 
master nodes fails, the associated subset of member nodes will 



communication 
paths. 



event one of the 
be automatically 
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reassigned to one or more other of the master nodes. 

8. (Original) The system of claim 7, wherein each of the nr|ember nodes is 
associated with at least one of the master nodes as a back-up master. 



9. (Previously Presented) The system of claim 1, wherein 
interconnected nodes is communicatively coupled as part of a peer 



■to^peer 



10. (Previously Presented) The system of claim 1, wherein the plurality of master 
noces is part of an edge-based content delivery network. 



11. (Previously Presented) The system of claim 1, wherein the mfember 
allocated to the subsets at least partly based upon one or more criteij a 
between each of the member nodes and the corresponding master noc es 



12. (Previously Presented) The system of claim 11, wherein the 
are selected from a group of criteria comprising geographical distance 
distance, bandwidth, latency, jitter, financial cost, and political boundaries 



13. (Previously Presented) The system of claim 1, wherein at 
master nodes further controls membership in another virtual overlay gtr^up 
the VPN. 



14. (Previously Presented) The system of claim 1, wherein a communication 
first one of the subsets of the member nodes uses a first encryption 
communication from a second one of the subsets uses a second 
different from the first encryption key. 



15. (Original) The system of claim 14, wherein one or more of the tfnaster nodes are 
operable to translate between encryption keys. 



the plurality of 
network- 



nodes are 
of connectivity 



connectivity criteria 
, topological 



least one of the 
different from 



from a 
key, and a 
encryption key that is 
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16. (Previously Presented) The system of claim 1, wherein a communication 
first one of the subsets of the member nodes and a communication frpm 
of tie subsets of the member nodes both use the same encryption key 



17. (Previously Presented) The system of claim 1, wherein at 
master nodes is operable to remotely install software communication 
new member node of the VPN without the necessity of installing augmented 
for :he new member node. 



east one of the 
Mechanisms for a 
hardware 



compnsrng: 
cbupled with each 



18. (Previously Presented) A method for managing a group, the method 
providing a plurality of interconnected nodes communicatively 

other as member nodes of a virtual private network CVPtf), wherein all 

communications between said interconnected nodes are encrypted; 
providing a plurality of master nodes, each of the master 

admission and departure in the VPN for an associated non-empty subsist 

nodes. 



ami 



19. (Previously Presented) The method of claim 18, wherein a membership 
in at least one of the subsets can be performed without notifying all of 
not associated with the changed subset. 



20. (Previously Presented) The method of claim 18, wherein at 
subsets do not share any member nodes in common. 

21. (Previously Presented) The method of claim 18 t wherein at 
subsets share at least one member node in common. 



22. (Previously Presented) The method of claim 21, wherein £ 
involving said common member node can be transmitted along muftipte paths 
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23. (Previously Presented) The method of claim 22, further compiling 
detection mechanism that receives said multiple-path communication a$ 



24. (Previously Presented) The method of claim 18, wherein in the 
master nodes fails, the associated subset of member nodes will 
reassigned to one or more other of the master nodes. 



event one of the 
se automatically 



esc i 



25. (Previously Presented) The method of claim 24, wherein 
noces is associated with at least one of the master nodes as a back-up 



26. (Previously Presented) The method of claim 18, wherein 
interconnected nodes is communicatively coupled as part of a peer-to*- 



27. (Previously Presented) The method of claim 18, wherein the p 
nodes is part of an edge-based content delivery network. 



28. (Previously Presented) The method of claim 18, wherein the mfembe 
allocated to the subsets at least partly based upon one or more criteria 
between each of the member nodes and the corresponding master nodes 



29. (Previously Presented) The method of claim 28, wherein the cc 
are selected from a group of criteria comprising geographical distance 
distance, bandwidth, latency, jitter, financial cost, and political boundaries 



an intrusion 
input. 



of the member 
master. 

the plurality of 
network. 



peer 



urality of master 



30. (Previously Presented) The method of claim 18, wherein at 
master nodes further controls membership in another virtual overlay gr^jup 
the VPN. 



31. (Previously Presented) The method of claim 18, wherein a commun cation from 
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a first one of the subsets of the member nodes uses a first encryption key, and a 
communication from a second one of the subsets uses a second encryption key that is 
different from the first encryption key. 



32. (Previously Presented) The method of claim 31, wherein on^ or ijnore of 
master nodes are operable to translate between encryption keys. 



33. (Previously Presented) The method of claim 18, wherein a cor imunjcation from 
a first one of the subsets of the member nodes and a communication fr;>m a [second one 
of the subsets of the member nodes both use the same encryption key 



east 



34. (Previously Presented) The method of claim 18, wherein at 
master nodes is operable to remotely install software communication 
new member node of the VPN without the necessity of installing augijfienteld 
for r;he new member node. 



the 



I 



one of the 
rftechenisms for a 
hardware 



35. (Previously Presented) A computer readable medium containing an executable 
program for managing a group, where the program performs the steps of: 

providing a plurality of interconnected nodes communicatively c;)uple|d with each 
other as member nodes of a virtual private network ("VPM"), wherein all 
communications between said interconnected nodes are encrypted; am I 

providing a plurality of master nodes, each of the master nodes controlling 
admission and departure in the VPN for an associated non-empty subset of I he member 
nodes. 

36. (Previously Presented) The computer readable medium of cl& yi 35, wherein a 
membership change in at least one of the subsets can be performed without notifying all 
of the master nodes not associated with the changed subset. 

37. (Previously Presented) The computer readable medium of claifln 35j wherein at 
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least two of the subsets do not share any member nodes in common. 

38. (Previously Presented) The computer readable medium of clajfn 35 
least two of the subsets share at least one member node in common. 



39. (Previously Presented) The computer readable medium of clai 
communication involving said common member node can be transmitted 
paths. 



40. (Previously Presented) The computer readable medium of 
comprising an intrusion detection mechanism that receives 
communication as input. 



Si lid 



wherein at 



m 33, wherein a 
aldng multiple 



*laim 



39, further 
nhultiple-path 



45. (Previously Presented) The computer readable medium of clainj 
member nodes are allocated to the subsets at least partly based 
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41. (Previously Presented) The computer readable medium of claim 35 wherein in 
the event one of the master nodes fails, the associated subset of merger ntdes will be 
automatically reassigned to one or more other of the master nodes. 

42. (Previously Presented) The computer readable medium of cljaim ^1, wherein 
each of the member nodes is associated with at least one of the m|ster ^odes as a 
back-up master. 

43. (Previously Presented) The computer readable medium of clairJ) 35, {wherein the 
plurality of interconnected nodes is communicatively coupled as part >f a ^eer-to-peer 
network. 

44. (Previously Presented) The computer readable medium of clain 35, jwherein the 
plurality of master nodes is part of an edge-based content delivery network. 



35, 



Uf on 



I 

herein the 
ofie or more 
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criteria of connectivity between each of the member nodes and : tlfle corresponding 
master nodes. 

46. (Previously Presented) The computer readable medium of clafrjji 45, [wherein the 
connectivity criteria are selected from a group of criteria comprisng geographical 
distance, topological distance, bandwidth, latency, jitter, financial cjpst, qnd political 
boundaries. 



47. (Previously Presented) The computer readable medium of claim 
least one of the master nodes further controls membership in another 
group different from the VPN. 



nodes 



48. (Previously Presented) The computer readable medium of clla 
communication from a first one of the subsets of the member 
encryption key, and a communication from a second one of the subsfefls 
encryption key that is different from the first encryption key, 



49. (Previously Presented) The computer readable medium of claifr 
or more of the master nodes are operable to translate between encrypt bn 



35, wherein at 
virtual overlay 



m 35, wherein a 
uses a first 
uses a second 



50. (Previously Presented) The computer readable medium of cla tn 
communication from a first one of the subsets of the mernb^ 
communication from a second one of the subsets of the member nofles 
same encryption key. 



51. (Previously Presented) The computer readable medium of claiifo 
lea&t one of the master nodes is operable to remotely install softwari 
mechanisms for a new member node of the VPN without the necesisity 
augmented hardware for the new member node. 



48, wherein one 

keys. 
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